Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jul 11, 2022
Malware in fcskuqoiemhdkwra
1 compromised version
- Jul 11, 2022
Malicious code in kqptcsuxewfkmazi (npm)
- Jul 11, 2022
Malware in kqptcsuxewfkmazi
1 compromised version
- Jul 11, 2022
Malicious code in srikduvzqlmwcotg (npm)
- Jul 11, 2022
Malware in srikduvzqlmwcotg
1 compromised version
- Jul 11, 2022
Malicious code in nkyuwzdtlximpejq (npm)
- Jul 11, 2022
Malware in nkyuwzdtlximpejq
1 compromised version
- Jul 11, 2022
Malicious code in gemcqukvlhfntxjs (npm)
- Jul 11, 2022
Malware in gemcqukvlhfntxjs
1 compromised version
- Jul 11, 2022
Malicious code in vzyfxaumldnesjor (npm)
- Jul 11, 2022
Malicious code in hdgktiuoszpelaxq (npm)
- Jul 11, 2022
Malicious code in cfbmoklknehgzjts (npm)
- Jul 11, 2022
Malware in vzyfxaumldnesjor
1 compromised version
- Jul 11, 2022
Malware in hdgktiuoszpelaxq
1 compromised version
- Jul 11, 2022
Malware in cfbmoklknehgzjts
1 compromised version
- Jul 11, 2022
Malicious code in fqmslpwnjihvuacd (npm)
- Jul 11, 2022
Malware in fqmslpwnjihvuacd
1 compromised version
- Jul 11, 2022
Malicious code in umqvjsxdkchroifn (npm)
- Jul 11, 2022
Malware in umqvjsxdkchroifn
1 compromised version
- Jul 11, 2022
Malicious code in jayqwipzmrogfklh (npm)
- Jul 11, 2022
Malware in jayqwipzmrogfklh
1 compromised version
- Jul 11, 2022
Malicious code in xgzpjmlihqbeosfw (npm)
- Jul 11, 2022
Malicious code in chnifdwmostgqvyp (npm)
- Jul 11, 2022
Malware in xgzpjmlihqbeosfw
1 compromised version
- Jul 11, 2022
Malware in chnifdwmostgqvyp
1 compromised version
- Jul 11, 2022
Malicious code in jclqbomyxrkfwpug (npm)
- Jul 11, 2022
Malware in jclqbomyxrkfwpug
1 compromised version
- Jul 11, 2022
Malicious code in cmpsitdbgofqnjuk (npm)
- Jul 11, 2022
Malware in cmpsitdbgofqnjuk
1 compromised version
- Jul 11, 2022
Malicious code in rjvixkndpbkstuqm (npm)
- Jul 11, 2022
Malware in rjvixkndpbkstuqm
1 compromised version
- Jul 11, 2022
Malicious code in payjwoufvtiqbhnr (npm)
- Jul 11, 2022
Malware in payjwoufvtiqbhnr
1 compromised version
- Jul 11, 2022
Malicious code in nkfiokycsbemrzhq (npm)
- Jul 11, 2022
Malicious code in gxinczwklhdeakmr (npm)
- Jul 11, 2022
Malware in gxinczwklhdeakmr
1 compromised version
- Jul 11, 2022
Malware in nkfiokycsbemrzhq
1 compromised version
- Jul 11, 2022
Malicious code in zsmjuedylcnhxiao (npm)
- Jul 11, 2022
Malware in zsmjuedylcnhxiao
1 compromised version
- Jul 11, 2022
Malicious code in qjgmalnsxuprwktd (npm)
- Jul 11, 2022
Malware in qjgmalnsxuprwktd
1 compromised version
- Jul 11, 2022
Malicious code in bxewcnthkvofspag (npm)
- Jul 11, 2022
Malware in bxewcnthkvofspag
1 compromised version
- Jul 11, 2022
Malicious code in umsyaoxzvgkkjbhr (npm)
- Jul 11, 2022
Malware in umsyaoxzvgkkjbhr
1 compromised version
- Jul 11, 2022
Malicious code in znkphrxjqsocebvw (npm)
- Jul 11, 2022
Malicious code in sxeutmcfpkralghn (npm)
- Jul 11, 2022
Malicious code in bdwngkairzovfpje (npm)
- Jul 11, 2022
Malware in sxeutmcfpkralghn
1 compromised version
- Jul 11, 2022
Malware in bdwngkairzovfpje
1 compromised version
Page 7068 of 7,293